手动搭建简易的Trojan-GO

服务端
下载程式

wget https://github.com/p4gefau1t/trojan-go/releases/download/v0.10.6/trojan-go-linux-amd64.zip

apt install unzip -y

解压程式

unzip /root/trojan-go-linux-amd64.zip

授权程式

chmod +777 /root/trojan-go

编辑配置文件

vi /root/example/server.json

{
    "run_type": "server",
    "local_addr": "0.0.0.0",
    "local_port": 443,     #监听端口
    "remote_addr": "127.0.0.1",
    "remote_port": 80,     #回落端口
    "password": [
        "your_password"    #密码
    ],
    "ssl": {
        "cert": "your_cert.crt",    #证书（自行解决）
        "key": "your_key.key",      #密匙（自行解决）
        "sni": "your-domain-name.com"  #域名你的
    },
    "router": {
        "enabled": true,
        "block": [
            "geoip:private"
        ],
        "geoip": "/root/geoip.dat",
        "geosite": "/root/geosite.dat"
    }
}

vi /root/example/server.yaml


run-type: server
local-addr: 0.0.0.0
local-port: 443
remote-addr: 127.0.0.1
remote-port: 80
password:
  - your_password
ssl:
  cert: your_cert.crt
  key: your_key.key
  sni: your-domain-name.com
router:
  enabled: true
  block:
    - 'geoip:private'
  geoip: /root/geoip.dat
  geosite: /root/geosite.dat

简易式运行

 ./trojan-go -config /root/example/server.yaml

设置system ctl开机自启

/root/example/trojan-go.service

[Unit]
Description=Trojan-Go - An unidentifiable mechanism that helps you bypass GFW
Documentation=https://p4gefau1t.github.io/trojan-go/
After=network.target nss-lookup.target

[Service]
User=root
CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE
AmbientCapabilities=CAP_NET_ADMIN CAP_NET_BIND_SERVICE
NoNewPrivileges=true
ExecStart=/root/trojan-go -config /root/example/server.yaml
Restart=on-failure
RestartSec=10s
LimitNOFILE=infinity

[Install]
WantedBy=multi-user.target

cp /root/example/trojan-go.service /etc/systemd/system

设置开机启动systemctl enable trojan-go
关闭开机启动systemctl disable trojan-go
开始运行systemctl start trojan-go
停止运行systemctl stop trojan-go
重新启动systemctl restart trojan-go
查看状态systemctl status trojan-go

客户端

{
"run_type": "client",
"local_addr": "127.0.0.1",
"local_port": 1080,
"remote_addr": "your_awesome_server",
"remote_port": 443,
"password": [
"your_awesome_password"
  ],
 "ssl": {
 "sni": "your-domain-name.com"
}
}

简易运行